Path Traversal Vulnerability in TeamCity Allows Limited Admin Actions
CVE-2024-27199
7.3HIGH
Summary
In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible
Affected Version(s)
TeamCity 0 < 2023.11.4
News Articles
JetBrains patches new TeamCity authentication bypass bugs
TeamCity servers risk being exposed to “complete compromise” if patch isn’t installed, researchers warned.
6 months ago
PravinKarthik
Read all of the posts by PravinKarthik on TheCyberThrone
9 months ago
TeamCity Vulnerability Exploits Lead to Jasmin Ransomware, Other Malware Types
CVE-2024-27198 and CVE-2024-27199 are vulnerabilities within the TeamCity On-Premises platform that can allow attackers to gain administrative control over affected systems.
9 months ago
References
EPSS Score
1% chance of being exploited in the next 30 days.
CVSS V3.1
Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
- 📰
First article discovered by Help Net Security
Vulnerability published
Vulnerability Reserved
Collectors
NVD DatabaseMitre Database12 News Article(s)